powershell 2 Incident Investigation Report: XLMRat — Tracing a Multi-Stage AsyncRAT Delivery Chain Apr 8, 2026 Forensic Investigation Report: Operation 'Reveal' — Memory Analysis Dec 13, 2025